
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft
File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft (raw, json)
Hash identifier: IgTsNvKPPPGrfdzPzeh5pS9Pb+XjSkDN7oFT5vcmjy4=
Subject key identifier: D8:F5:7B:08:7D:9D:6A:30:0D:8B:F0:58:7C:87:45:6F:9C:B5:4F:A7
Authority key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7
Certificate issuer: /CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7
Certificate serial: 151519CEEF7ACC06FD46FCC561916D100312A302
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft
Manifest number: 056A
Signing time: Sun 19 Apr 2026 01:51:31 +0000
Manifest this update: Sun 19 Apr 2026 01:46:31 +0000
Manifest next update: Wed 22 Apr 2026 07:08:31 +0000
Files and hashes: 1: 3130332e3135332e33342e302f32332d3234203d3e20313430343532.roa (hash: DOlg8/LY/J8VlLg8q8vs0YMPL93NGt0bpyLPSkqCW/A=)
2: 323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa (hash: CPeh5pcKIP6qJ3Jzx7KUROvLf3APBLJFmjl0GUWh3r8=)
3: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl (hash: UKzWSmJ2BJqSkmqTmQpmefAmMn6G382KBj/DMHKkMsg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl
rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:15:19:ce:ef:7a:cc:06:fd:46:fc:c5:61:91:6d:10:03:12:a3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7
Validity
Not Before: Apr 19 01:46:31 2026 GMT
Not After : Apr 22 07:08:31 2026 GMT
Subject: CN=D8F57B087D9D6A300D8BF0587C87456F9CB54FA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:83:ff:2e:28:68:a5:34:64:c9:81:62:d7:
df:86:84:78:49:f2:2d:60:30:36:16:a9:ec:05:d5:
ce:6b:2b:df:be:76:69:30:0e:2b:ab:30:ed:48:8c:
60:12:16:8e:98:e2:fc:01:87:fe:51:30:d7:0b:e0:
aa:54:5c:49:9e:1f:2b:e1:19:aa:d9:fa:53:17:ec:
4b:6e:ce:38:5b:a7:45:d5:1c:90:84:76:23:d8:86:
9e:a7:b0:bd:b2:95:97:14:07:3a:f4:7f:41:8a:2a:
5d:83:c6:3e:4e:51:06:d2:9b:ff:f6:e7:58:08:c2:
04:13:69:0f:0a:9d:b0:55:bb:4c:e4:db:db:ce:5d:
b4:cf:ab:f2:21:28:64:9a:c2:4e:94:ab:81:41:32:
6c:e8:e9:04:52:d8:da:c4:40:38:03:b5:8b:27:62:
aa:10:36:78:6d:44:40:4e:6f:aa:7f:77:d3:f5:db:
11:63:01:f8:21:be:8b:7d:6f:66:ed:4d:d4:68:63:
81:2d:c2:e0:c8:7a:2e:47:13:7e:88:91:e4:4e:cd:
bb:17:a2:28:79:c6:4e:cd:5d:61:57:61:22:59:3b:
be:65:ee:cd:7c:21:2d:35:ce:d7:bb:d4:2a:ea:0c:
43:56:ae:a7:69:ea:57:bb:f3:7b:d2:c2:19:a8:20:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F5:7B:08:7D:9D:6A:30:0D:8B:F0:58:7C:87:45:6F:9C:B5:4F:A7
X509v3 Authority Key Identifier:
keyid:B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0d:f3:33:16:b5:a1:55:72:70:63:b8:7b:cc:5f:b6:b5:f7:
a6:1a:48:42:3c:92:d5:6d:d7:a4:21:cc:94:d1:d7:3e:ef:1e:
42:1b:e1:11:6e:b6:ca:60:63:99:bb:91:1d:98:e2:86:98:9a:
8b:51:4c:1d:49:c4:db:66:2a:58:61:fe:58:71:83:b4:50:fd:
e3:5a:f0:d4:3a:20:8c:11:01:fe:c4:cb:63:34:1f:c9:4a:4f:
d3:ef:29:19:2f:62:12:44:37:b9:c3:e0:a8:f9:16:ec:fa:a3:
a2:80:20:3a:f3:02:9d:70:97:8e:7d:a9:3c:21:52:c2:b7:a6:
22:58:8d:3b:4a:b4:8b:b9:ee:48:3f:51:39:b3:0e:28:e1:d5:
c4:81:e2:eb:d0:cb:59:06:c7:3b:6b:19:64:44:61:e5:8e:6b:
43:49:56:25:d2:cf:10:47:be:b0:16:47:64:3e:52:99:c3:63:
96:b2:7d:25:19:79:33:d7:83:f8:85:16:94:10:06:16:a4:16:
2a:f0:fc:58:01:7c:99:ed:06:6b:7b:93:eb:86:8e:24:68:4b:
88:c2:ea:19:a9:4b:18:e0:cd:06:1b:00:6c:7b:14:17:28:cb:
be:90:64:4e:fb:33:97:f9:28:9b:f2:8a:16:56:dc:b5:02:6c:
bb:8f:49:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:52 2026 by rpki-client